Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/8112ff-b216-406f-8f59-72a082cdb182/1/tzy1h_2SJLb2IQJJ_1XK2xAYPrM.roa
File: tzy1h_2SJLb2IQJJ_1XK2xAYPrM.roa (raw, json)
Hash identifier: Dy8iOy6EO3XHGF9DJa+1ms3OJZlU9ibvtSninJ5NH4g=
Subject key identifier: B7:3C:B5:87:FD:92:24:B6:F6:21:02:49:FF:55:CA:DB:10:18:3E:B3
Certificate issuer: /CN=aace6725a0a0ddd1680480a83785d2cd57bf6ab0
Certificate serial: 018D79CA944313F6F977B59E9B2BEFEA96C6
Authority key identifier: AA:CE:67:25:A0:A0:DD:D1:68:04:80:A8:37:85:D2:CD:57:BF:6A:B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qs5nJaCg3dFoBICoN4XSzVe_arA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/8112ff-b216-406f-8f59-72a082cdb182/1/tzy1h_2SJLb2IQJJ_1XK2xAYPrM.roa
Signing time: Mon 05 Feb 2024 15:02:15 +0000
ROA not before: Mon 05 Feb 2024 15:02:15 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 16276
IP address blocks: 46.28.236.0/24 maxlen: 24
185.228.207.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/8112ff-b216-406f-8f59-72a082cdb182/1/qs5nJaCg3dFoBICoN4XSzVe_arA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/8112ff-b216-406f-8f59-72a082cdb182/1/qs5nJaCg3dFoBICoN4XSzVe_arA.mft
rsync://rpki.ripe.net/repository/DEFAULT/qs5nJaCg3dFoBICoN4XSzVe_arA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 May 2024 05:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:79:ca:94:43:13:f6:f9:77:b5:9e:9b:2b:ef:ea:96:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aace6725a0a0ddd1680480a83785d2cd57bf6ab0
Validity
Not Before: Feb 5 15:02:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b73cb587fd9224b6f6210249ff55cadb10183eb3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:aa:67:30:1b:b9:98:4e:5e:1f:29:b4:a6:7f:
35:0a:19:19:87:ae:90:a3:10:c2:4f:06:cb:85:4a:
69:ab:2f:d6:14:a2:30:e4:f4:32:3a:ad:6a:20:f1:
bb:8c:a3:dc:6f:15:a3:63:fd:b3:88:75:f2:2b:fd:
7d:71:b7:6e:1a:f5:a2:2e:71:b0:6c:11:83:d3:67:
fa:7f:33:73:51:ab:3b:44:69:95:8a:31:51:94:ba:
cd:e9:b4:b8:ce:c0:4d:da:9d:d4:ae:65:02:77:2f:
21:f3:e6:1e:87:12:5f:2e:ce:74:25:bc:ed:a6:cb:
8c:b5:bd:15:fd:8a:c1:a3:8b:a6:ea:ce:6b:f7:71:
fe:d9:5c:71:42:8c:2b:2a:a8:e9:1c:b7:de:66:31:
55:77:15:47:d1:75:bd:00:ad:6d:28:da:4d:db:c6:
3b:2a:07:16:db:7f:05:47:70:f3:f0:45:7f:1d:db:
c1:54:1d:57:50:41:a4:fc:9b:67:93:0b:21:74:a0:
19:d4:d8:50:d0:1e:92:71:62:93:be:f9:ad:23:04:
34:28:fa:ba:0f:04:be:c6:c6:2c:93:53:af:52:9b:
39:60:fe:61:e6:19:e8:d7:ea:d4:4d:df:0d:88:ea:
c3:02:e2:ed:10:ac:10:98:bc:c4:e1:56:37:ad:82:
a7:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:3C:B5:87:FD:92:24:B6:F6:21:02:49:FF:55:CA:DB:10:18:3E:B3
X509v3 Authority Key Identifier:
keyid:AA:CE:67:25:A0:A0:DD:D1:68:04:80:A8:37:85:D2:CD:57:BF:6A:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qs5nJaCg3dFoBICoN4XSzVe_arA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8112ff-b216-406f-8f59-72a082cdb182/1/tzy1h_2SJLb2IQJJ_1XK2xAYPrM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8112ff-b216-406f-8f59-72a082cdb182/1/qs5nJaCg3dFoBICoN4XSzVe_arA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.28.236.0/24
185.228.207.0/24
Signature Algorithm: sha256WithRSAEncryption
c8:4d:fc:4f:26:66:f6:e6:48:01:af:58:b3:5b:6e:4f:09:4c:
3b:6d:01:36:29:15:ae:00:c2:15:b2:2d:79:d4:4c:a2:42:1f:
5e:55:1c:94:75:56:bb:a5:02:0d:03:84:df:f4:88:48:cc:e4:
7a:2e:ce:fe:0e:bf:ee:9a:3d:c4:ec:da:d8:22:5e:de:6d:1e:
28:dd:53:9c:98:de:8e:5f:82:a3:26:09:91:19:78:f2:28:13:
4e:49:cc:08:f3:ca:6e:eb:9f:19:f3:dd:33:e6:62:c9:87:2e:
e5:a6:68:a5:82:e2:37:5f:a6:6d:4b:0d:83:fe:af:fc:d9:60:
6c:f8:fd:a2:4b:64:a4:9c:71:d6:84:96:cd:77:e6:51:20:a6:
7a:5c:58:7a:fd:9c:5f:e2:dc:66:c6:3d:20:40:ed:29:a0:83:
5a:18:98:d6:f1:08:c3:c6:f8:9e:cd:75:14:e1:2c:d1:ba:1e:
fb:76:35:51:c5:94:ed:35:b3:36:c4:f0:fd:a2:a4:98:5a:aa:
fc:42:64:b2:d6:ea:0f:ee:4b:de:5b:e7:f3:c2:02:5f:e2:eb:
1e:cd:7c:1a:cb:65:22:f0:3a:a3:6a:8e:4f:93:cd:ef:0e:02:
15:ac:5f:e8:cc:1a:e7:e0:0f:f9:79:e5:b1:83:0d:57:93:d1:
9d:1e:b7:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 10:48:15 2024 by rpki-client on console-ams.rpki-client.org